Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
File: BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft (raw, json)
Hash identifier: g3lDMPC5Be9YEPX7ObY3Zu1q9K8nLfjmYNqbFW+FCCo=
Subject key identifier: 04:8F:CB:22:8D:47:03:2F:17:00:8C:8E:9F:B1:DF:ED:FE:E5:47:7E
Authority key identifier: 04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
Certificate issuer: /CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Certificate serial: 019510FDB356DE2015B748788292F2936832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
Manifest number: 0727
Signing time: Sun 16 Feb 2025 23:00:16 +0000
Manifest this update: Sun 16 Feb 2025 23:00:16 +0000
Manifest next update: Mon 17 Feb 2025 23:00:16 +0000
Files and hashes: 1: BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl (hash: pjQY1OkJFzBBDsdiSPnE6hp81RKPrwrbYoy91ZljOmU=)
2: jV-3tArc8dsjcZ6kDNPRZe17c7E.roa (hash: N7hoaH3KyqZMDXhGvm+f+pqXc8cqz/H0JZUoSjuldtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:b3:56:de:20:15:b7:48:78:82:92:f2:93:68:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0462b9b58ee08e83f1a9ad4e9643e80d3b40cb3e
Validity
Not Before: Feb 16 23:00:16 2025 GMT
Not After : Feb 17 23:00:16 2025 GMT
Subject: CN=048fcb228d47032f17008c8e9fb1dfedfee5477e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:9d:0f:a7:d6:cc:84:fc:08:cb:9c:2e:fe:
04:da:56:af:ac:33:e2:ee:b8:53:04:41:71:c9:f8:
f9:3b:b8:f7:df:92:16:b9:71:19:e3:e6:c8:b6:00:
03:d3:70:57:1f:65:ac:ab:98:30:0c:c0:e7:b1:b5:
bd:a0:54:c0:92:dd:a6:dc:cd:d8:92:4a:e9:df:6d:
92:2c:9f:f4:a8:19:9f:1b:f0:47:6a:79:fa:8e:85:
8b:24:b2:b1:86:27:4b:c9:94:0c:04:c5:bc:00:97:
14:bf:20:ec:80:55:24:64:f0:30:ea:ef:3f:5f:6b:
b8:ab:b0:82:12:c8:76:bf:5a:3a:1f:1c:b2:1a:5e:
1d:f2:78:99:da:ce:06:f3:a0:bd:4e:9f:34:52:ff:
e7:ce:94:11:21:e2:06:84:10:1d:9c:f9:33:4f:40:
82:17:97:c8:45:91:46:e8:d7:03:ee:59:eb:bf:3a:
82:23:2f:86:c8:e1:17:4c:25:ac:31:c9:99:ca:a7:
ec:9e:0c:4a:ec:63:10:4f:e0:8c:c3:51:ac:8b:6b:
be:35:78:ba:83:b6:e5:54:77:db:51:b3:33:94:b5:
b1:6e:24:4f:7a:06:18:f8:d2:99:8a:f8:62:87:e2:
14:76:06:e5:7e:4a:43:c1:48:20:b9:97:15:bb:2f:
cb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8F:CB:22:8D:47:03:2F:17:00:8C:8E:9F:B1:DF:ED:FE:E5:47:7E
X509v3 Authority Key Identifier:
keyid:04:62:B9:B5:8E:E0:8E:83:F1:A9:AD:4E:96:43:E8:0D:3B:40:CB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK5tY7gjoPxqa1OlkPoDTtAyz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/e1ee5b-023b-430a-9c6f-0ee2ea7d4884/1/BGK5tY7gjoPxqa1OlkPoDTtAyz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:6f:56:08:0e:b6:07:0e:2d:99:76:0a:3b:07:1d:a7:57:b3:
6f:01:4c:26:1d:87:ec:48:b0:04:2f:c8:2e:a8:ac:a5:90:66:
2d:88:91:f5:62:3d:2e:04:e7:ef:4c:e1:a0:6f:2b:1e:60:48:
b0:96:37:0d:9c:d4:5d:91:09:81:ac:ac:56:27:1a:20:b0:96:
10:85:93:f4:af:34:fc:02:9a:66:c6:b3:05:a2:16:9e:ae:a5:
9c:14:bb:64:19:5d:22:25:cc:a1:f4:7e:21:c5:91:5c:38:3d:
00:57:1e:66:f2:25:56:7c:43:37:7c:18:c6:40:9f:0a:20:67:
33:67:30:88:af:64:51:4a:15:a5:68:46:dd:2d:2a:dd:c0:0f:
6f:c9:fe:78:03:18:6d:4c:fe:ba:76:07:92:3c:d4:55:b7:a8:
92:77:5e:13:e0:e2:8e:72:38:84:b3:1d:f9:31:10:7d:7b:9b:
59:3b:21:84:63:e8:d4:00:eb:1c:b6:71:41:0a:23:1c:96:67:
bb:c4:8a:e3:83:2b:7c:d0:db:20:1c:b2:13:80:1e:75:ee:2d:
fd:a0:d9:95:91:2e:b9:44:e6:1d:06:f6:c6:3b:f0:1f:16:ef:
80:b5:b0:08:68:5f:b0:e8:51:5a:ac:94:8e:ad:bc:5e:41:34:
6a:e0:bd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:59:34 2025 by rpki-client